<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>Yes I did, and there is nothing about asterisk in the /var/log folder</div><div><br></div><div>I am starting to think that the server on compromised.</div><div><br><br>Sent from my iPhone</div><div><br>On Nov 27, 2014, at 11:09 AM, Thorsten Göllner <<a href="mailto:tg@ovm-group.com">tg@ovm-group.com</a>> wrote:<br><br></div><blockquote type="cite"><div>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
Did you take a look at /var/log/syslog?<br>
<br>
<div class="moz-cite-prefix">Am 26.11.2014 21:08, schrieb Antoine
Megalla:<br>
</div>
<blockquote cite="mid:7D5A57FB-657C-439B-9DCB-2790AE9C920D@rocketmail.com" type="cite">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div>Hi,</div>
<div><br>
</div>
<div>I looked for asterisk in /usr/sbin using the commands ls and
find and whereis and it was not there.</div>
<div><br>
</div>
<div>I know that the process is killed because when I start
asterisk using the command asterisk -vvvvc it starts and then it
exits and the word killed is wrote on the console.</div>
<div><br>
</div>
<div>Ever time I copy a new executable to /usr/sbin either using
cp command or make install it gets deleted too.</div>
<div><br>
</div>
<div>Now I used the strace command on asterisk and I can clearly
see at the end of the strace the line : killed by SIGKILL </div>
<div>This means that something or someone is actually and
purposely killing asterisk but I do not know what or who is
doing that also I know that I am the only user on the system.</div>
<div><br>
</div>
<div>Again any indicators to solve this very weird issue are
welcomed.</div>
<div><br>
</div>
<div>Regards,</div>
<div>Antoine Megalla<br>
<br>
Sent from my iPhone</div>
<div><br>
On Nov 26, 2014, at 6:12 PM, Thorsten Göllner <<a moz-do-not-send="true" href="mailto:tg@ovm-group.com">tg@ovm-group.com</a>>
wrote:<br>
<br>
</div>
<blockquote type="cite">
<div>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
<br>
<div class="moz-cite-prefix">Am 26.11.2014 11:37, schrieb
Antoine Megalla:<br>
</div>
<blockquote cite="mid:1950385167.758236.1416998270014.JavaMail.yahoo@jws10051.mail.ne1.yahoo.com" type="cite">
<div style="color:#000; background-color:#fff;
font-family:HelveticaNeue, Helvetica Neue, Helvetica,
Arial, Lucida Grande, Sans-Serif;font-size:12px">
<div id="yui_3_16_0_1_1416997104891_2510" dir="ltr">Hi,</div>
<div id="yui_3_16_0_1_1416997104891_2510" dir="ltr"><br>
</div>
<div id="yui_3_16_0_1_1416997104891_2510" dir="ltr">I am
struggling with a very strange issue I have been facing
for the past week;</div>
<div id="yui_3_16_0_1_1416997104891_2510" dir="ltr">I have
a fresh install of CENTOS 5.11 and I have installed
asterisk 1.8.32 form sources.</div>
<div id="yui_3_16_0_1_1416997104891_2510" dir="ltr">The
asterisk installation went fine but as soon as I start
asterisk executable it loads everything and then after
the "Ready" line the process gets killed and when I try
to run it again i get: /usr/sbin/asterisk : command not
found</div>
<div id="yui_3_16_0_1_1416997104891_2510" dir="ltr"><br>
</div>
<div id="yui_3_16_0_1_1416997104891_2510" dir="ltr">I
cleaned the source and re-installed asterisk and again
the same thing happened again !!!</div>
<div id="yui_3_16_0_1_1416997104891_2510" dir="ltr">I
downloaded asterisk versions 1.4, 11, 12 and compiled
them from sources and installed them (make install) and
amazingly, the same thing happened to all of them: I do
a "make" then "make install" and as soon as I start
asterisk the process is killed and the executable
removed from /usr/sbin.</div>
<div id="yui_3_16_0_1_1416997104891_2510" dir="ltr"><br>
</div>
<div id="yui_3_16_0_1_1416997104891_2510" dir="ltr">I
tried to look a the asterisk log files but I cannot find
a single error in them.</div>
<div id="yui_3_16_0_1_1416997104891_2510" dir="ltr">Also
if it was really deleted how did bash know that asterisk
is supposed to be located in /usr/sbin/asterisk ?</div>
<div id="yui_3_16_0_1_1416997104891_2510" dir="ltr"><br>
</div>
<div id="yui_3_16_0_1_1416997104891_2510" dir="ltr">I
tried to copy the executable myself after compilation
(everything done as root) to the /usr/sbin and again if
it runs then it is deleted.</div>
<div id="yui_3_16_0_1_1416997104891_2510" dir="ltr"><br>
</div>
<div id="yui_3_16_0_1_1416997104891_2510" dir="ltr">If
someone can explain to me this behavior or advise me on
what to check to resolve this issue, then I would be
grateful.</div>
<div id="yui_3_16_0_1_1416997104891_2510" dir="ltr"><br>
</div>
</div>
</blockquote>
<br>
Hi,<br>
<br>
you write "Also if it was really deleted .." - did you looked
at it via "ls /usr/sbin/asterisk"?<br>
<br>
You compiled asterisk (make / make install) as root I think.
Perhaps access rights are not set properly? root is owner but
you try to start the daemon as "normal" user?<br>
<br>
You write "the process is killed". Where do you now? Did you
get a message on your terminal? Did you take a look at
/var/log/syslog?<br>
</div>
</blockquote>
</blockquote>
<br>
</div></blockquote></body></html>